Civic

Your agent just tried to delete 2,847 emails from your inbox. Civic blocked it. Read-only access. Don't connect your agent to Gmail and hope for the best. Civic is the security layer that sits between your agent and every tool it touches. Guardrails aren't optional. They're built in. Read about today's launch: civic.com/news/agent-sec…

5/ Need more information? stepsecurity.io has a helpful write-up about this attack. Get it here → stepsecurity.io/blog/axios-com… Help fellow axios users by sharing this thread. Follow us for more builder content → x.com/civickey

4/ This isn't an axios problem. It's a supply chain problem. It can happen to any package with a compromised maintainer account. The npm ecosystem's trust model puts a lot of weight on individual account security, and when that fails, the blast radius is wide.

1/ ⚠️ Axios ecosystem compromised on npm. Versions 1.14.1 and 0.30.4 were hit with a supply chain attack that drops a RAT on install. No import needed. Civic-hosted systems and MCP servers were not affected.

Blocked. Your agent connects to 76 MCP servers through Civic. But, you gave it 14 guardrails to decide what it can actually do. If your agent goes sideways, Civic stops it in one move. Get it now → civic.com

We shipped a Python client for Civic. pip install civic-mcp-client Connect your agent to 85 MCP servers. Guardrails and audit log on every tool call. Works with LangChain, Pydantic AI, and FastMCP. docs.civic.com/civic/recipes/…

The best AI agent operators look like good managers. Engineering is the easy part now. The real question isn't "should I learn to code?" It's "do I know how to manage someone I can't see?"

$300B wiped from SaaS stocks. Not because SaaS is dying. Because agents are the new users. Our VP @titus_k in @CIOonline. When agents access your tools, auditability and revocation aren't optional. cio.com/article/414666…

Skills are prompts. Prompts are suggestions. Our CTO's agent was prompted to DM him a digest of his inbox. It posted to the company's general Slack channel instead. He wrote about what we built to fix it. civic.com/news/from-claw…

@evans1vn thank you!

@civickey 43 agents support is kinda wild 🔥

We just shipped a setup skill for Civic. One command: Use npx skills add civic.com to start Guided walkthrough that picks your client, helps you create your account, and builds an implementation plan. 43 supported agents.

Anyone giving blanket access to their emails to OpenClaw are playing a risky game! Learn about how Civic can help with Titus!

We endorsed .agent. An open domain for the agent ecosystem. Not owned by any one company. If you build with AI agents, follow @agentcommunity_ agentcommunity.org

Interesting projects being built. Openclaw hack night w/ @mintlify @digitalocean @civickey @CloudflareDev @cerebras Shoutout to @lizziepika

Your @dify_ai workflow called Gmail. Then Slack. Then your database. What decided which operations it was allowed to run on each one? If you don't have an answer, that's the answer. docs.civic.com/civic/recipes/…

6/ Congrats to all four teams, and thanks to everyone who built on Civic at the AI London Hackathon. What stood out: teams didn't just connect to Civic. They made it load-bearing. Bodyguard as a primary defense layer. MCP as the backbone for agent tool access, keeping every tool call safe with Civic guardrails. Auth integrated seamlessly using both Civic and third-party auth providers. Big thanks to our fellow sponsors @base @luffa_ai @OpenAI @vercel @architectxyz @elevenlabs @canva and to @encodeclub for putting it all together. More from @civickey soon.

@encodeclub 5/ Honourable mention: Mirai Flashcards Built by Nirvaan. Mirai Flashcards had a clean Civic Auth integration on both frontend and backend. Civic is the sole auth mechanism. A solid example of what a focused Civic Auth drop-in looks like.

1/ We sponsored a Civic prize track at the AI London Hackathon & Conference with @encodeclub. Four teams stood out for how they integrated Civic into real, working projects, protecting agents and baking load-bearing security into their architecture. Here are the winners.🏆